Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CAA322735211EFAC638B4D762E951A.roa
File: 59CAA322735211EFAC638B4D762E951A.roa (raw, json)
Hash identifier: 0OgvLY9I/sKq6UxfQmTylRexYjS9r3Yd+ZGhNnKXpqY=
Subject key identifier: E3:4E:2B:A6:67:BD:9C:B3:8C:C3:9B:E0:64:13:21:58:28:CF:7E:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B674
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CAA322735211EFAC638B4D762E951A.roa
Signing time: Sun 15 Sep 2024 11:05:00 +0000
ROA not before: Sun 15 Sep 2024 11:04:57 +0000
ROA not after: Fri 08 Aug 2025 11:04:57 +0000
asID: 133861
IP address blocks: 45.207.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46708 (0xb674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 11:04:57 2024 GMT
Not After : Aug 8 11:04:57 2025 GMT
Subject: CN=66e6bf5c-03c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:8a:12:80:d8:ed:5c:23:aa:b1:f3:e9:51:
4e:a5:e6:4a:92:86:9a:20:dd:b6:6d:9e:79:1f:8c:
2f:84:83:ca:1c:fa:0f:3d:52:57:bc:a7:17:5b:b1:
93:a1:c4:1e:d7:86:77:fc:04:43:e7:c6:2f:e9:ca:
77:27:a2:93:8e:52:fb:9f:8b:f4:0a:18:5a:78:d3:
17:ee:b9:f9:46:31:dc:70:98:e9:18:6c:c7:4d:48:
cd:21:e0:bf:05:f9:1e:9a:7d:6c:96:3d:2c:ed:ac:
63:70:90:c2:a4:8e:9e:8a:8e:63:31:96:bc:d6:0e:
4d:99:cd:06:cd:bf:ca:91:8a:94:ba:7b:fc:60:3e:
2f:7a:92:29:94:3e:bf:c6:02:19:2e:4e:25:7a:66:
b2:ad:db:f3:ae:8d:d5:e0:34:b3:dd:27:6f:1e:d0:
d6:a3:9b:86:21:c6:bf:f9:6a:fd:57:56:9e:94:7a:
1e:1c:4e:ca:b0:24:ae:43:96:2b:67:7f:2c:a1:df:
f3:14:f2:5c:77:d6:9a:31:d3:3e:76:4e:bd:fc:fe:
0f:d1:68:5c:76:03:6d:2c:82:0b:1f:b7:f7:fc:8d:
e8:a4:fd:2a:63:37:f9:cc:1f:fd:ac:cc:0f:7b:7c:
61:07:3b:6d:40:2b:e1:e5:37:b4:b3:e0:8f:08:3c:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:2B:A6:67:BD:9C:B3:8C:C3:9B:E0:64:13:21:58:28:CF:7E:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CAA322735211EFAC638B4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/22
Signature Algorithm: sha256WithRSAEncryption
85:a5:a6:ad:88:6a:c5:4f:90:1d:8a:fb:ac:99:c6:80:f8:41:
ea:98:9d:a5:75:46:69:30:de:fa:da:4f:ad:57:d4:6a:80:fc:
3c:5e:69:b5:d3:41:c8:18:4f:1f:6d:06:63:3d:5b:79:f0:55:
b3:95:61:26:93:50:2d:2f:9b:38:8b:01:d7:7c:82:be:e6:da:
6a:ef:34:48:e5:85:d6:e4:2c:66:12:ea:ea:6a:c6:d7:20:c7:
f6:97:92:13:e4:71:b3:62:a2:e2:be:9e:91:8a:e0:42:e3:51:
c6:05:57:8d:92:59:ff:3d:c3:6e:93:ad:ec:a8:5e:e0:59:c5:
42:03:8f:8a:a5:a7:18:89:ec:b2:b6:d6:95:5a:0b:eb:f1:7d:
3f:32:45:6e:02:37:bc:ad:25:e3:c6:93:70:72:f4:b8:71:23:
52:87:1c:f7:52:59:72:66:7e:11:f9:46:ac:44:40:dd:9b:1b:
88:42:8f:6f:37:79:dc:b6:c4:8a:c3:8b:db:35:71:53:78:41:
00:38:ef:a6:4b:cb:84:0e:cb:fa:7c:55:1f:87:1e:bf:38:56:
55:61:f8:c5:ed:00:0e:73:e7:72:d5:30:20:8d:a5:e8:e6:8e:
e6:9a:03:c0:3c:7e:c3:ea:90:9b:eb:e5:d5:52:ea:2d:0a:3e:
eb:32:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org